imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:1a:7d:37:cf:03:85:67:63:c7:43:d9:5c:62:b9:58 was issued on by GlobalSign nv-sa.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1a:7d:37:cf:03:85:67:63:c7:43:d9:5c:62:b9:58
Serial Number (int): 1466767436923869927011085315576346968
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ab:ae:49:83:f4:9b:76:41:df:d0:5c:b0:10:3b:46:28:26:fe:e4:c4
AuthorityKeyId: 42:6d:57:2d:4f:1f:26:77:74:a6:27:64:f6:80:fa:8f:48:68:fe:7c

Fingerprint (sha1): 26:81:cd:aa:ad:02:2e:00:f3:a4:62:db:26:96:c4:e6:cb:8a:73:2a
Fingerprint (sha256): 02:0f:f7:8f:a1:5c:b5:32:ab:40:dc:ca:dd:85:1c:fc:74:c9:b0:58:13:8c:a0:28:c9:ad:71:e5:33:04:4e:98

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl

Check the revocation status for certificate imperva.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.uatbookme.airindia.in
*.itravel.dc.sita.aero
*.staging.itravel.dc.sita.aero
flyai.mobi
yn.staging.itravel.dc.sita.aero
*.prod.sita.aero
ai.staging.itravel.dc.sita.aero
*.qa.eco.dc.sita.aero
*.airindia.in
uatbookme.airindia.in
*.flyai.mobi
*.sita.aero
bookme.airindia.in
reservations.aircreebec.ca
imperva.com
*.dc.sita.aero

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAAjNrsVWMJdJn2aBC/l
v1S2THDLATOB0xHjpwJLL0aYOPRKoX68jIbF9Phkq7v8hydco5pv5qo/ObUakzwS
atBOR9RYOr8RvALE+PV4FE0jV7oyYG8VHRMvSxSX2hqmeRQpZQAHMHjIvFFVgN9v
xbHkMw748tusZfala4TmU174+NRRnohmvoi4DLBtDS8/fPHApjoXtbiPxZdvbvYs
uCAX3h4ON3E0/CReKjYUQFyoq6ZuCO4ylGslNdzOG358M5dc3PFqrJrA5NHVcHs8
kME9Eo2HJwun0pfd6/6J2poHmm8oLcAINgyjtQRTKoVQFSdE0fRfdhN021gg85V0
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1466767436923869927011085315576346968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-30 16:07:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-01 07:02:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20703149844777767686278813393616713732364085842056123431137108814724528354607923737078109025393174149759080290948153479094016309149045449604501560379469232180055776781883751080394006722043561192148319488377153394571147802167608168581469597669120379475060320117118940363481535961088280482386627182842664427656626363506057617053197452769085037880327217839249436712363616657319023146661872464468008923344294475336672734587214841748169936424075865673375708322975047471091296673275046663374627196283199493310187374243099405521608634165278479581756369691933577544201674655469212634270836003162382703729889764903575828657267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (346 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uatbookme.airindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itravel.dc.sita.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.itravel.dc.sita.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyai.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yn.staging.itravel.dc.sita.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.sita.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.staging.itravel.dc.sita.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.eco.dc.sita.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatbookme.airindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyai.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sita.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookme.airindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.aircreebec.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dc.sita.aero'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abae4983f49b7641dfd05cb0103b462826fee4c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2020'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 426d572d4f1f267774a62764f680fa8f4868fe7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017619e8e179000004030047304502204467219fb40d641476031b8f7cbb91f58b91c1f709e053579ebeb489efbca6c5022100ce24415529e23a967033eac98f16d26b4ea811272094a1a7ba83bfa0deabea740076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017619e8e1d50000040300473045022043ba7a99ca142de6ed066427d419ae8919d2904f51d2167a3c0bae8acb381719022100cf1849be998f516794e9eb77b277a7ffa627f1a5c8a882a4f56b5b1ba9995d41
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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